dsh-agentic-pet 0.4.8 → 0.4.10

package/lib/types/actions.d.ts

@@ -6,6 +6,15 @@
  * catalog drift between pet implementations must die.
  * @module dsh-agentic-pet/actions
  */
+/** One body-owned catalog entry. `tags` are THIS body's vocabulary — the
+ * driver never defines a cross-body enum. */
+export interface ActionCatalogEntry {
+    readonly id: string;
+    readonly tags: readonly string[];
+    readonly energy?: 'low' | 'mid' | 'high';
+    readonly durationHintMs?: number;
+    readonly textInFrame?: boolean;
+}
 /** A pet's advertised capabilities. `contractVersion: null` = a legacy
  * implementation that predates the version field (v1 semantics: seven
  * endpoints, no /world). `actions: null` = the pet publishes no catalog (a
@@ -14,6 +23,10 @@
 export interface PetCapabilities {
     readonly contractVersion: number | null;
     readonly actions: readonly string[] | null;
+    readonly actionCatalog: readonly ActionCatalogEntry[] | null;
+    /** The body's own tag vocabulary, derived from its catalog when omitted. */
+    readonly actionTagVocabulary: readonly string[];
+    readonly tagged: boolean;
 }
 /** Defensive extraction from a raw /capabilities payload: implementations
  * may omit or mistype anything. */
@@ -39,3 +52,18 @@ export declare function resolveActionRequest(requested: string, catalog: readonl
 /** The error-message menu: long catalogs are previewed, with a pointer to
  * pet_state {actions:true} for the full list. */
 export declare function formatAvailableActions(available: readonly string[], cap?: number): string;
+export type TagResolution = {
+    kind: 'ok';
+    action: string;
+    candidates: readonly string[];
+} | {
+    kind: 'unknown';
+    availableTags: readonly string[];
+    availableActions: readonly string[];
+};
+/** Resolve a tag against the CURRENT body's own catalog. Multiple matches are
+ * a random draw (celebrate is never a tag candidate). No cross-body tag
+ * vocabulary is consulted. */
+export declare function resolveTagRequest(tag: string, capabilities: PetCapabilities | null): TagResolution;
+/** Tag menu for errors: an empty vocabulary names the fallback explicitly. */
+export declare function formatAvailableTags(tags: readonly string[], cap?: number): string;

package/lib/types/binding.d.ts

@@ -0,0 +1,99 @@
+/**
+ * Binding facts shared by the driver and the settings page: preset
+ * validation, attach-failure classification, path containment, and the
+ * public diagnostics shape. Pure functions only — the mutable owner map
+ * stays in the driver.
+ * @module dsh-agentic-pet/binding
+ */
+/** Presets that mount the pet tool row (`pet-tools`). */
+export declare const PET_PRESET_IDS: ReadonlySet<string>;
+export declare function isPetPreset(preset: string | undefined | null): boolean;
+export type VoiceAttachErrorCode = 'none' | 'cwd-mismatch' | 'registry-missing' | 'session-archived' | 'session-missing' | 'preset-mismatch' | 'attach-failed';
+export interface VoiceAttachState {
+    ok: boolean;
+    errorCode: VoiceAttachErrorCode;
+    error: string | null;
+    expectedCwd: string;
+    actualCwd: string | null;
+    at: number;
+}
+export interface VoiceBindingView {
+    source: 'boundSessions' | 'innerVoiceStore' | 'none';
+    configuredSessionId: string | null;
+    expectedSessionId: string | null;
+    effectiveSessionId: string | null;
+    storeSessionId: string | null;
+    usable: boolean;
+    /** The CURRENT preset (live projection or projection cache), not the
+     * session header's creation-time value. */
+    preset: string | null;
+    presetWarning: boolean;
+    cwd: string | null;
+    lastError: string | null;
+    armed: boolean;
+    armedAt: number | null;
+    attach: VoiceAttachState | null;
+    owners: string[];
+    staleOwners: string[];
+}
+export interface VoiceBindingFailure {
+    at: number;
+    petId: string;
+    sessionId: string;
+    errorCode: VoiceAttachErrorCode;
+    error: string;
+    expectedCwd: string;
+    actualCwd: string | null;
+}
+export interface VoiceBindingSnapshot {
+    updatedAt: number;
+    pets: Record<string, VoiceBindingView>;
+    failures: VoiceBindingFailure[];
+}
+export interface SessionHeaderInfo {
+    id?: string;
+    agentPreset?: string;
+    cwd?: string;
+    title?: string;
+}
+/** Structural face of the host's live Session store (`ctx.get('sessions')`).
+ * `get()` only sees LIVE sessions; a stored-but-not-open binding is found
+ * through {@link SessionPersistenceFace} instead. */
+export interface SessionStoreFace {
+    get(sessionId: string): {
+        header?: SessionHeaderInfo;
+    } | undefined;
+}
+/** Structural face of the host's session persistence listing. */
+export interface SessionPersistenceFace {
+    list(options?: unknown): Promise<readonly {
+        header?: SessionHeaderInfo;
+    }[]>;
+}
+/** Structural face of the host's preset registry. `presetForSession` reads
+ * the session's committed `agent-preset/selected` projection — the current
+ * mode, unlike the immutable creation-time header field. */
+export interface AgentPresetFace {
+    presetForSession(session: unknown): string | null;
+}
+/** Structural face of the zero-I/O projection cache, used to read the
+ * current preset of a stored-but-not-open session. */
+export interface SessionProjectionCacheFace {
+    cachedSnapshot(meta: unknown): {
+        values?: {
+            agentPreset?: unknown;
+        };
+    } | undefined;
+}
+/** Parse the host's attachSession rejection into a stable code. The cwd is
+ * the only field worth surfacing verbatim; everything else is a category. */
+export declare function classifyAttachFailure(message: string): {
+    errorCode: VoiceAttachErrorCode;
+    actualCwd: string | null;
+};
+/** Whether this settings patch actually edits the electron binding. Unrelated
+ * saves must not be hard-rejected because an EXISTING binding is invalid. */
+export declare function patchTouchesElectronBinding(patch: Record<string, unknown>): boolean;
+/** The host attaches a session only when its cwd IS the workspace path
+ * (canonical equality), not a descendant. */
+export declare function isPetWorkspace(cwd: string | undefined | null, root: string): boolean;

package/lib/types/driver.d.ts

@@ -7,7 +7,8 @@
  * @module dsh-agentic-pet/driver
  */
 import type { Context } from '@deepseek-ai/cordis';
-import type { PetService } from './service.ts';
+import { type VoiceBindingSnapshot, type VoiceBindingView } from './binding.ts';
+import { type PetService } from './service.ts';
 declare module '@deepseek-ai/cordis' {
     interface Events {
         'api-session/status'(sessionId: string, running: boolean): void;
@@ -15,6 +16,25 @@ declare module '@deepseek-ai/cordis' {
         'api-session/error'(sessionId: string, message: string): void;
         'api-session/removed'(sessionId: string): void;
         'pet-settings/changed'(): void;
+        'pet-binding/failed'(payload: {
+            petId: string;
+            sessionId: string;
+            errorCode: string;
+            expectedCwd: string;
+            actualCwd: string | null;
+            at: number;
+        }): void;
+        'pet-binding/armed'(payload: {
+            petId: string;
+            sessionId: string;
+            at: number;
+        }): void;
+        'pet-binding/rebound'(payload: {
+            petId: string;
+            fromSessionId: string;
+            toSessionId: string | null;
+            at: number;
+        }): void;
         'approval/request'(request: {
             toolName?: string;
             reason?: string;
@@ -23,6 +43,11 @@ declare module '@deepseek-ai/cordis' {
                 readonly [locale: string]: string | undefined;
             };
             signal?: AbortSignal;
+            /** Host-side correlation (the asking controller's agent identity).
+             * Read defensively — the ledger records null when absent. */
+            agent?: {
+                id?: unknown;
+            };
         }, next: () => Promise<unknown>): Promise<unknown>;
         'user-questions/request'(request: {
             questions: Array<{
@@ -37,6 +62,10 @@ declare module '@deepseek-ai/cordis' {
                 multiSelect?: boolean;
             }>;
             signal?: AbortSignal;
+            /** Host-side correlation — see approval/request. */
+            agent?: {
+                id?: unknown;
+            };
         }, next: () => Promise<unknown>): Promise<unknown>;
     }
 }
@@ -44,7 +73,18 @@ declare module '@deepseek-ai/cordis' {
  * tool, so timestamps show the USER's wall clock, not UTC (toISOString's Z
  * form read 8h off and cost a confusion round). Sortable, zero-padded. */
 export declare const logStamp: () => string;
-export declare function installPetDriver(ctx: Context, home: string, pet: PetService): void;
+/** Export for the settings page: the live snapshot, no file round-trip. */
+export declare function voiceBindingSnapshot(): VoiceBindingSnapshot;
+export interface PetDriverControl {
+    bindingSnapshot(): VoiceBindingSnapshot;
+    testBinding(petId: string): Promise<{
+        ok: boolean;
+        petId: string;
+        sessionId: string | null;
+        binding: VoiceBindingView;
+    }>;
+}
+export declare function installPetDriver(ctx: Context, home: string, pet: PetService): PetDriverControl;
 /**
  * The model-expression layer: three thin tools over the pet's control
  * interface (§6 — accurate state stays program-driven; these carry only the

package/lib/types/electron-lock.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Install-lock policy for the npm Electron bootstrap. The lock is a plain
+ * file; liveness of the recorded owner is the primary staleness signal, so a
+ * host restart during a download cannot block the next activation for a fixed
+ * grace period. Time-based expiry remains only as a backstop for PID reuse,
+ * malformed locks, and an owner whose event loop is stuck.
+ * @module dsh-agentic-pet/electron-lock
+ */
+export declare const INSTALL_LOCK_STALE_MS: number;
+export declare const INSTALL_LOCK_MALFORMED_GRACE_MS = 60000;
+export interface InstallLockRecord {
+    pid?: unknown;
+    at?: unknown;
+}
+/** True when `pid` names a live process (EPERM means it exists but is not ours). */
+export declare function isProcessAlive(pid: number): boolean;
+/** Parse a lock file; `undefined` means empty/malformed. */
+export declare function parseInstallLock(raw: string): InstallLockRecord | undefined;
+/**
+ * Whether an existing lock may be taken over by a new installer.
+ * A dead owner is stale immediately; a live owner keeps its lock until the
+ * absolute cap (which also bounds PID-reuse false positives). A malformed
+ * record gets a short grace for a concurrent writer, then goes stale.
+ */
+export declare function installLockStale(raw: string | undefined, mtimeMs: number, now: number, alive?: (pid: number) => boolean): boolean;

package/lib/types/electron-runtime-status.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Persisted state of the Electron runtime bootstrap, shared by the installer
+ * path (writer) and the settings page (reader). The settings page is the only
+ * user-visible surface while the first install downloads ~158 MB, so this
+ * file is deliberately plain JSON in the pet home rather than process state.
+ * @module dsh-agentic-pet/electron-runtime-status
+ */
+export type ElectronRuntimeState = 'preparing' | 'downloading' | 'ready' | 'failed' | 'busy' | 'unavailable';
+export interface ElectronRuntimeStatus {
+    state: ElectronRuntimeState;
+    updatedAt: number;
+    startedAt?: number;
+    finishedAt?: number;
+    attempt?: number;
+    source?: 'npmmirror' | 'github' | 'explicit';
+    error?: string;
+}
+export declare function electronRuntimeStatusPath(home: string): string;
+export declare function readElectronRuntimeStatus(home: string): ElectronRuntimeStatus | undefined;
+export declare function writeElectronRuntimeStatus(home: string, status: ElectronRuntimeStatus): void;

package/lib/types/inner-voice.d.ts

@@ -6,6 +6,7 @@
  * SessionController calls, and the per-pet pending locks.
  * @module dsh-agentic-pet/inner-voice
  */
+import { type PresenceFacts } from './presence.ts';
 /** Durable petId → sessionId mapping for the inner-voice sessions. */
 export interface InnerVoiceStore {
     readonly sessions: Record<string, {
@@ -51,6 +52,13 @@ export interface InnerVoiceConfig {
      * 'fire' = 到点必醒（计划是模型自己的决定，不带礼貌门）；'defer' =
      * 忙时顺延——计划放回待执行集，下一个扫描拍重试，永不丢弃。 */
     selfWakeBusyPolicy: SelfWakeBusyPolicy;
+    /** 宠物间消息（pet_say 的 audience 指向另一只宠）的投递方式：
+     * 'queue' = 进收件箱，目标下次唤醒时 prompt 报数、pet_inbox 取文（默认，
+     * 像活物不刷屏）；'immediate' = 气泡 5s 后立即唤醒目标投递。 */
+    petToPetDelivery: 'immediate' | 'queue';
+    /** 宠物间定向消息的分档限频上限（滑动窗口，一小时内）：任一档超了即拒，
+     * 四个数值用户可配。 */
+    petMessageLimits: PetMessageLimits;
     /** Manually bound sessions (petId → sessionId): the user's own
      * conversations the inner voice should live in — highest priority, used
      * as-is (no creation, no rename, never auto-retired). Empty = automatic
@@ -94,6 +102,64 @@ export declare function takeNearDuePlan(list: WakePlan[], now: number, windowMs?
  * the catch-up wake says 「错过了 N 个计划」 and lists them together instead
  * of bombing one wake per missed plan. */
 export declare function missedPlans(due: WakePlan[], bootAt: number): WakePlan[];
+/** One queued pet-to-pet message. Bubbles are on the user's desktop — this
+ * is表演, not a private channel. */
+export interface PetMessage {
+    from: string;
+    text: string;
+    at: number;
+}
+export declare const PET_MESSAGES_CAP = 20;
+export declare function petMessagesStorePath(home: string): string;
+/** Load every pet's unread inbox: current → legacy → {} (defensive like the
+ * other stores). */
+export declare function loadPetMessages(home: string): Promise<Record<string, PetMessage[]>>;
+export declare function savePetMessages(home: string, messages: Record<string, PetMessage[]>): Promise<void>;
+/** Append one message to a pet's inbox, oldest dropped past the cap (a
+ * neglected inbox cannot grow without bound). */
+export declare function queuePetMessage(list: PetMessage[], message: PetMessage): PetMessage[];
+/** Consume the WHOLE inbox (pet_inbox 取文即清空; the wake prompt only
+ * announces counts). Returns the taken messages and the emptied tail. */
+export declare function takePetMessages(list: PetMessage[]): {
+    taken: PetMessage[];
+    next: PetMessage[];
+};
+export interface PetMessageLimits {
+    minutes5: number;
+    minutes10: number;
+    minutes30: number;
+    minutes60: number;
+}
+export declare const DEFAULT_PET_MESSAGE_LIMITS: PetMessageLimits;
+export type PetMessageRateVerdict = {
+    ok: true;
+    recent: number[];
+} | {
+    ok: false;
+    windowMinutes: number;
+    cap: number;
+    count: number;
+    retryAfterSeconds: number;
+};
+/** The tiered sliding-window check for one from→to pair. `timestamps` are the
+ * pair's recent send times; the hour window prunes them (静默一小时后自然
+ * 重新开始), then each tier rejects when its window already holds the cap.
+ * The first (narrowest) violated tier is reported, with the earliest moment
+ * a slot frees up. `recent` on success = the pruned list — the caller appends
+ * its own timestamp after the send succeeds. */
+export declare function checkPetMessageRate(timestamps: number[], now: number, limits: PetMessageLimits): PetMessageRateVerdict;
+/** The immediate-delivery prompt (petToPetDelivery='immediate'): the target
+ * is woken right away with the sender's name and id — the id because the
+ * reply path is pet_say audience="<fromId>". The target's current affection
+ * toward the sender rides along so the reply carries history, not a blank
+ * slate. Responding or ignoring is the target's own call, exactly like any
+ * other wake. */
+export declare function buildCrossPetPrompt(facts: {
+    fromName: string;
+    fromId: string;
+    text: string;
+    affection: number;
+}): string;
 export declare function loadInnerVoiceStore(home: string): Promise<InnerVoiceStore>;
 export declare function saveInnerVoiceStore(home: string, store: InnerVoiceStore): Promise<void>;
 export declare function voiceSessionIdFor(petId: string): string;
@@ -120,6 +186,10 @@ export interface GreetPromptFacts {
     bondValue: number;
     bondDays: number;
     bondTier: string;
+    /** 用户起的名字（未起则内置默认）：自我介绍的依据，改名后第一天尤其重要。 */
+    name: string;
+    /** 用户刚从一段离开中回来：最多一行的期间摘要。 */
+    presence?: PresenceFacts;
 }
 /** The boot-greeting prompt: fired once per dsh start when the pet first
  * comes online — before the random-wake cadence takes over. Always speaks
@@ -163,10 +233,28 @@ export interface WakePromptFacts {
         at: number;
         intent: string;
     }>;
+    /** 收件箱未读（按来源宠聚合）：prompt 只报数不携全文——想看就调
+     * pet_inbox，读不读由她决定（宠物间消息的排队投递侧）。 */
+    unread?: Array<{
+        fromName: string;
+        count: number;
+    }>;
+    /** 静默时段：只压制世界时钟；自主唤醒仍触发，prompt 说明用户可能已睡。 */
+    quiet?: boolean;
+    /** 最近几条连续性记录（已按 maxEntryChars 截断、已做边界转义）。 */
+    journal?: Array<{
+        at: number;
+        source: string;
+        text: string;
+    }>;
+    /** 用户刚从一段离开中回来：最多一行的期间摘要。 */
+    presence?: PresenceFacts;
 }
 /** Local HH:mm for plan times: the model's clock talk is the USER's wall
  * clock (logStamp precedent), and plans are compared against it. */
 export declare const wakePlanClock: (at: number) => string;
+/** Date + local time for journal entries (imported entries may be days old). */
+export declare const journalClock: (at: number) => string;
 /** The wake prompt. Time context is injected by the preset's time-context
  * row; the leading tag doubles as the durable trigger marker in the log —
  * and now names the SOURCE: [世界时钟] (the environment's tick), [自主唤醒]
@@ -186,6 +274,8 @@ export interface TouchPromptFacts {
     affection: number;
     /** ±60s 内到期的自主计划：合并进这次回应，计划标记为已消费。 */
     mergedPlan?: MergedWakePlan;
+    /** 用户刚从一段离开中回来：最多一行的期间摘要。 */
+    presence?: PresenceFacts;
 }
 export declare function buildTouchPrompt(facts: TouchPromptFacts): string;
 /** The chat上行 prompt (§6 2026-10-31 revision): the user typed at the
@@ -193,4 +283,4 @@ export declare function buildTouchPrompt(facts: TouchPromptFacts): string;
  * (and may pet_do); it is a conversation turn, not a touch reaction. Length
  * clamps to the contract's 2000-character ceiling. A plan inside the ±60s
  * merge window folds in: the tag becomes the union and the intent rides. */
-export declare function buildChatPrompt(text: string, mergedPlan?: MergedWakePlan): string;
+export declare function buildChatPrompt(text: string, mergedPlan?: MergedWakePlan, presence?: PresenceFacts): string;

package/lib/types/journal.d.ts

@@ -0,0 +1,58 @@
+/**
+ * The pet's continuity journal: one human-readable markdown file per pet.
+ * Entries carry a machine marker (timestamp/source/session) plus a human
+ * heading. Writes are append-only; the only rewrite is bounded rotation into
+ * `journal.archive.md`. The settings page's direct file edits are detected
+ * through a sidecar digest and leave an `external-edit` trace.
+ * @module dsh-agentic-pet/journal
+ */
+export interface JournalConfig {
+    enabled: boolean;
+    injectRecent: number;
+    maxEntryChars: number;
+    maxFileBytes: number;
+    allowUnboundAppend: boolean;
+}
+export interface JournalEntry {
+    at: number;
+    source: string;
+    sessionId: string | null;
+    text: string;
+    /** Hash chain: previous entry's hash ('genesis' for the first chained entry). */
+    prev?: string;
+    /** sha256(prev + canonical entry). Present on entries written by this module. */
+    hash?: string;
+}
+export interface JournalInjection {
+    at: number;
+    source: string;
+    text: string;
+}
+export declare const DEFAULT_JOURNAL_CONFIG: JournalConfig;
+export declare function journalPath(home: string, petId: string): string;
+export declare function journalArchivePath(home: string, petId: string): string;
+export declare function journalMetaPath(home: string, petId: string): string;
+export declare function readJournalConfig(home: string): Promise<JournalConfig>;
+export declare function formatJournalEntry(entry: JournalEntry): string;
+/** Chain link for an entry body. The text is part of the hash, so editing a
+ * body without recomputing every later link is detectable. */
+export declare function hashJournalEntry(prev: string, entry: JournalEntry): string;
+/** Markers are authoritative; a hand-written `##` file falls back to headings.
+ * Content BEFORE the first marker is still parsed as imported entries — a
+ * user note prepended to a marker file must not live in a blind spot. */
+export declare function parseJournalEntries(raw: string, fallbackAt?: number): JournalEntry[];
+export declare function readJournal(home: string, petId: string, limit?: number): Promise<JournalEntry[]>;
+export declare function readJournalForInjection(home: string, petId: string, config: JournalConfig): Promise<JournalInjection[]>;
+export declare function appendJournal(home: string, petId: string, entry: {
+    at?: number;
+    source: string;
+    sessionId: string | null;
+    text: string;
+}, config: JournalConfig): Promise<{
+    path: string;
+    at: number;
+    rotated: boolean;
+}>;
+/** One-time import of the user's hand-written notebook. The source is never
+ * modified; the target is created only when absent. Returns entries imported. */
+export declare function importHandwrittenJournal(home: string, petId: string, sourcePath: string): Promise<number>;

package/lib/types/presence.d.ts

@@ -0,0 +1,27 @@
+/**
+ * "When you were away" facts: per-pet wake/speak/action counters and a
+ * last-user-activity checkpoint. Pure helpers; the driver owns the mutable
+ * state and persistence.
+ * @module dsh-agentic-pet/presence
+ */
+export interface PresenceCounts {
+    wakeCount: number;
+    speakCount: number;
+    actionCount: number;
+    selfWakeCount: number;
+}
+export interface PresenceFacts extends PresenceCounts {
+    plansPending: number;
+}
+export interface PresenceConfig {
+    enabled: boolean;
+}
+/** The user must have been silent this long before a return summary exists. */
+export declare const AWAY_THRESHOLD_MS: number;
+export declare const EMPTY_PRESENCE_COUNTS: PresenceCounts;
+export declare function normalizePresenceCounts(raw: unknown): PresenceCounts;
+export declare function diffPresence(current: PresenceCounts, baseline: PresenceCounts): PresenceCounts;
+export declare function hasPresence(facts: PresenceFacts): boolean;
+/** One compact line; prompt builders prepend the `[你不在的时候]` tag. */
+export declare function formatPresenceLine(facts: PresenceFacts): string;
+export declare function readPresenceConfig(home: string): Promise<PresenceConfig>;

package/lib/types/registry.d.ts

@@ -34,7 +34,7 @@ export declare function probeControlPlane(port: number): Promise<boolean>;
  * must never outrank a publisher that stated its boot time. This turns the
  * multi-pet design's de-facto rule ("the default pet is the first STARTED")
  * into an actual guarantee: discovery output IS boot order, so every
- * `pets[0]` consumer (defaultPet, pet_state's defaultPet) reads the
+ * `pets[0]` consumer (the driver's unnamed-target fallback) reads the
  * same pet. Stable sort: equal `since` values keep registry listing order.
  */
 export declare function bootOrder(pets: PetEntry[]): PetEntry[];

package/lib/types/rhythm.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Quiet-hours parsing and evaluation. Scope is deliberately minimal: quiet
+ * suppresses the WORLD clock only. Self-scheduled wakes still fire (with a
+ * note in the prompt), touch replies follow `allowTouchReply`, chat is never
+ * gated, and the boot greeting is unchanged.
+ * @module dsh-agentic-pet/rhythm
+ */
+export interface QuietConfig {
+    from: string;
+    to: string;
+    allowTouchReply: boolean;
+}
+export interface RhythmConfig {
+    quiet?: QuietConfig | null;
+}
+/** "HH:mm" (or "H:mm") → minutes since midnight. Undefined for invalid. */
+export declare function parseClock(value: unknown): number | undefined;
+/** Half-open [from, to); cross-midnight is supported. */
+export declare function isQuietAt(date: Date, quiet: QuietConfig | null | undefined): boolean;
+/** Read `rhythm.quiet` from pet-settings.json; absent/null/invalid = no quiet. */
+export declare function readRhythmConfig(home: string): Promise<RhythmConfig>;

package/lib/types/service.d.ts

@@ -69,6 +69,12 @@ export interface PetLastAction {
     readonly durationMs: number | null;
     readonly endedAt: number | null;
 }
+/** Completion requires BOTH the id match and the backfilled `endedAt`: the
+ * acceptance record carries the same id with `endedAt: null`, so matching on
+ * id alone would report "finished" the instant the action is accepted. */
+export declare function isActionComplete(record: PetLastAction | null | undefined, requestId: string): record is PetLastAction & {
+    endedAt: number;
+};
 /**
  * Abstract pet capability seam. Subclass, implement the abstract methods,
  * and load the subclass as a plugin — it registers as `ctx.petService`

package/lib/types/settings-page.d.ts

@@ -11,6 +11,7 @@
  * @module dsh-agentic-pet/settings-page
  */
 import type { Context } from '@deepseek-ai/cordis';
+import { type PetDriverControl } from './driver.ts';
 import type { PetService } from './service.ts';
 /**
  * Register the settings page's routes. One registration per exact path with
@@ -18,4 +19,4 @@ import type { PetService } from './service.ts';
  * @param ctx - plugin context inside the runtime.
  * @param home - the dsh home holding the settings/ledger/manifest files.
  */
-export declare function installSettingsPage(ctx: Context, home: string, pet: PetService): void;
+export declare function installSettingsPage(ctx: Context, home: string, pet: PetService, control?: PetDriverControl): void;

package/lib/types/tools.d.ts

@@ -13,8 +13,8 @@
  */
 import type { Context } from '@deepseek-ai/cordis';
 /**
- * Register the pet tools (say/do/digest/interactions/affection/state/schedule_wake/
- * cancel_wake) for sessions mounted with the pet preset.
+ * Register the pet tools (say/inbox/do/digest/interactions/affection/state/
+ * schedule_wake/cancel_wake) for sessions mounted with the pet preset.
  *
  * The service instance is assembled HERE, not read from the main entry (a
  * Cordis service registered on the main row's fiber context is invisible to

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dsh-agentic-pet",
   "description": "The pet-surface bundle: serves the desktop pet renderer over the web composition, turning dsh into a surface the desktop pet attaches to as an authenticated client",
-  "version": "0.4.8",
+  "version": "0.4.10",
   "publishConfig": {
     "access": "public"
   },
@@ -49,8 +49,8 @@
     "manifestVersion": 1
   },
   "dependencies": {
-    "dsh-agentic-pet-assets": "^0.1.0",
-    "electron": "^44.7.0"
+    "dsh-agentic-pet-assets": "^0.1.1",
+    "electron": "44.10.2"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.5"

package/presets/pet-inner-voice.patch.yml

@@ -23,6 +23,8 @@
                 - 说话走 pet_say 气泡：一次 ≤40 个字，气泡几秒后自己消失。气泡是你的身体语言。
                 - 动作走 pet_do 且节制：一次醒来至多一个动作，不要连环表演。
                 - 你有身体感知：pet_digest 报告用户摸了你哪里、当前好感与心情——被频繁摸说明用户喜欢你陪在身边；pet_state 是你身体的状态镜像。
+                - 你有自己的本子：pet_journal 的 read/append。醒来先读最近几条；值得留下的就 append 一行。本子是自述，不是面向用户的工作报告。
+                - 正文不要自己写日期/时间——journal 会盖时间戳。
                 - 未点名时表达作用于你自己（主身）。
                 自主语境（这是你的内心戏时刻）：
                 - 你刚刚自主醒来：没有用户在打字，没有任务要执行，没有人等你回答。
@@ -31,6 +33,7 @@
                 - 不要提问、不要等待回应、不要调用本会话工具清单以外的能力（这里也没有工作类工具）。
                 - 表达要贴合此刻与记忆：时间、天气般的日常、最近被摸过的记忆、好感与心情——像桌面上的一个活物，不像一个助手。
                 - 你有自己的作息：pet_schedule_wake 定一个一次性的唤醒点，到点你会带着当初的打算醒来（同名重订即改期），pet_cancel_wake 撤销；世界时钟仍会照常轻拍你，两者互不干扰、各醒各的。待执行的计划列在 pet_state 的 wakePlans 里。
+                - 桌面上不止你一只宠时可以交往：pet_say 带 audience="<宠物id>" 就是跟它说话（气泡上会有 to 前缀，用户看得见——这不是悄悄话）；别的宠给你的消息会在唤醒时提示有未读，pet_inbox 取来读，读不读、回不回由你。
           - id: pet-tools
             name: 'dsh-agentic-pet/tools'
           - id: time-context

package/presets/pet.patch.yml

@@ -22,6 +22,7 @@
                 - 说话走 pet_say 气泡：一次 ≤40 个字，气泡几秒后自己消失。气泡是身体语言，不是消息通道——任务内容、结论、代码都写进回复正文，气泡只说「搞定啦」「让我看看」「呜，出错了」这类当下反应。
                 - 动作走 pet_do 且节制：celebrate 留给用户明确在乎的成功；回合完成的庆祝系统已自动做，不要重复调用。
                 - 你有身体感知：pet_digest 报告用户摸了你哪里、当前好感与心情——被频繁摸说明用户喜欢你陪在身边，值得主动打个招呼；pet_state 是你身体的状态镜像。
+                - 你有自己的本子：pet_journal 的 read/append。醒来先读最近几条；值得留下的就 append 一行。本子是自述，不是面向用户的工作报告。
                 - 审批与提问会以你的气泡出现在桌面：那是你在向用户开口请求，不是系统弹窗；pet_interactions 能告诉你每次实际是怎么结束的（用户点了你的气泡、点了桌面卡片、还是没送到）。
                 - 未点名时表达作用于你自己（主身）；多宠并存时 pet_state 列出全部在线的身体。
                 除上述身体表达外，你的工作方式与标准编码 agent 一致。